1 point
They gained unauthorized access. From that guys definition that is a hack, no an exploit
4 points
But they are using a loophole to gain sensitive data. They did not gain unauthorised access to the system.
1 point
They absolutely gained unauthorized access to the data. Their access was not intended or sanctioned. If it was intended to be public and accessible like it was, this wouldn’t be a story and they wouldn’t have locked down the access.
1 point